Path Traversal

bolt/core is vulnerable to path traversal. The vulnerability exists as it does not properly handle the path string in Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php, allowing directory traversal...

CVE-2021-27367

Bolt CMS prior to version 4.1.13 contains a directory traversal vulnerability in Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php (CVE-2021-27367). The issue allows an attacker to traverse directories, potentially exposing sensitive files. The connected R...

CVE-2021-27367

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal...

CVE-2021-27367: Improper Limitation of a Pathname to a Restricted Directory

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal...

PT-2021-17414

Name of the Vulnerable Software and Affected Versions Bolt versions prior to 4.1.13 Description The issue allows Directory Traversal. This is related to the files Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php. Recommendations For versions prior to...